Article View: demon.tech.mac
Article #1897Re: New Spam tactic?
From: Steve Linford
Date: Tue, 20 Jan 1998 00:00
Date: Tue, 20 Jan 1998 00:00
34 lines
2381 bytes
2381 bytes
>Steve Firth <filter@firthcom.demon.co.uk> wrote: > >> Rebecca and Rowland <real-address-in-sig@flurbletigibbet.rhubarb.foobar> >> wrote: >> >> > What I'd like to know is how to forge a bounce messsage. >> >> Don't bother, use SIMS or AIMS and bounce them all properly. SIMS 1.6 is incredibly effective at bouncing spam (it even does a verify on the sender's address), it cut my spam from 15-20 a day down to practically nothing. Unfortunately for Demon customers it also cuts down drastically on our normal mail too (as poined out by Chris Bennett) by bouncing any further mail items Demon's relays send in the same stream as the spam item. This is a problem limited to Demon and centers around the need for a reset (RSET) command to be issued by Demon's server when a MAIL FROM command fails during a transaction involving multiple mail items, as stated in RFC 281. Basically Demon doesn't send a RSET when a MAIL FROM fails, instead Demon's server presents another MAIL FROM which puts the receiving server (SIMS) out of sequence so SIMS sends an error (500 Unknown Command), to which Demon's server responds with yet another MAIL FROM and so it continues until all further mail in that transaction is bounced. Demon say according to RFC 281 a RSET is not needed - presumably as a MAIL FROM can act as a RSET, but Stalker say NOT in the case of multiple items in a transaction. RFC 281 seems to be ambiguous on this so who knows. _________________________________________________________________________ Steve Linford steve [at] ultradesign.com UltraDesign Technology Ltd. http://www.ultradesign.com
Technical Details
Message-ID:
<B0EAA9349668615B7@ultradesign.demon.co.uk>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<B0DC2A59966823A0F2@0.0.0.0> <1d2mawd.pidohm5shlrkN@p23.nas1.is4.u-net.net> <1d2ppm8.ls4dirzh903kN@firthcom.demon.co.uk> <1d2q21l.123y7jp1ohvr9nN@p43.nas2.is4.u-net.net> <B0E10FB696683DB76@pcihhh.ott.aber.ac.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10b5a2,7aa1b08d913da491 X-Google-Attributes: gid10b5a2,public From: steve@news2.ultradesign.com (Steve Linford) Subject: Re: New Spam tactic? Date: 1998/01/20 Message-ID: <B0EAA9349668615B7@ultradesign.demon.co.uk> X-Deja-AN: 317758249 References: <B0DC2A59966823A0F2@0.0.0.0> <1d2mawd.pidohm5shlrkN@p23.nas1.is4.u-net.net> <1d2ppm8.ls4dirzh903kN@firthcom.demon.co.uk> <1d2q21l.123y7jp1ohvr9nN@p43.nas2.is4.u-net.net> <B0E10FB696683DB76@pcihhh.ott.aber.ac.uk> X-NNTP-Posting-Host: ultradesign.demon.co.uk [194.222.95.123] Organization: UltraDesign Technology MacOS Software Development Newsgroups: demon.tech.mac